CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

CVE-2020-35745

PHPGURUKUL Hospital Management System V 4.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, doctors, patients, change admin password, get appointment history and access all session logs...

CVE-2020-35745

Consolidated details for CVE-2020-35745 show a vulnerability in PHPGURUKUL Hospital Management System v4.0 where access to admin/dashboard.php is not properly restricted. The root cause is improper access control on the admin dashboard, enabling an attacker to view all user, doctor, and patient d...